Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: Ui4mpuIIzXYtQ4kF9HFxJ855EyxDjzj9VTLj5/PDJkE=
Subject key identifier: B0:EF:1D:CA:92:82:15:B2:2A:3C:EA:D2:84:BD:9B:C6:3B:40:85:9C
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 019DE3A1138F3603C7C3C66E72FF8C0E4656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 18EA
Signing time: Fri 01 May 2026 13:01:17 +0000
Manifest this update: Fri 01 May 2026 13:01:17 +0000
Manifest next update: Sat 02 May 2026 13:01:17 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: ywFuafJ+ZbeYnjXqjpF68U7r28sGRJmgKxZ2W34UCk8=)
2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:a1:13:8f:36:03:c7:c3:c6:6e:72:ff:8c:0e:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: May 1 13:01:17 2026 GMT
Not After : May 2 13:01:17 2026 GMT
Subject: CN=b0ef1dca928215b22a3cead284bd9bc63b40859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:c7:28:c5:23:ce:67:75:57:5b:1a:4b:f5:
a7:6e:50:b8:c5:e9:9b:09:12:bb:15:58:d1:b6:fc:
f5:f5:92:f2:2c:01:0e:8e:80:22:27:f1:71:e1:94:
9a:a5:a2:2b:e0:10:2b:c3:ef:73:e8:8d:eb:ec:c8:
9a:d8:f7:1b:c0:22:2a:57:b6:39:5f:39:b4:1b:c0:
58:5b:93:4b:f4:6e:0a:5a:93:7e:28:5f:a8:4d:c5:
53:25:77:70:e2:fa:13:e8:33:0f:14:d4:1c:3b:99:
83:dd:bc:6f:6c:b5:2e:e7:09:4d:65:67:3d:16:ef:
b8:bc:a2:5a:64:e8:a6:44:43:42:38:df:9f:7d:33:
bc:0f:1c:32:15:b8:ab:3c:5a:22:b1:05:e9:8c:f6:
1c:c8:c1:0b:74:90:cb:a9:26:ef:b2:c7:e9:8a:63:
a6:6d:8e:f7:d0:61:01:62:5c:cc:9e:18:ce:01:cd:
f0:b6:b0:cd:04:cb:29:c4:7e:0f:ab:57:4a:a7:f5:
21:6a:64:20:29:7b:9b:5c:8a:5d:60:73:a0:90:2f:
dd:11:1b:30:2f:21:48:47:a1:83:74:22:99:1a:9f:
77:9a:d6:f2:11:ef:28:e7:7f:92:bd:2d:6b:df:2f:
24:e5:a1:c9:e2:0f:20:ac:af:84:05:85:51:b8:a6:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:1D:CA:92:82:15:B2:2A:3C:EA:D2:84:BD:9B:C6:3B:40:85:9C
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:71:dd:ad:dc:70:5d:e2:9a:3b:3b:2e:66:d4:30:4c:dd:98:
35:7f:46:1b:86:e0:f3:94:8f:6e:c8:14:13:c0:ad:c6:04:b8:
fe:f9:4a:d3:b4:0c:84:3b:7a:2c:a6:08:79:e8:15:9e:cd:ab:
1e:9e:fc:93:1b:96:2d:dd:46:b0:7b:8f:8d:81:3f:01:e2:b4:
78:17:af:c2:82:25:55:22:98:b0:30:2a:76:e4:8c:97:fb:fe:
bc:78:93:a8:6b:31:f1:a6:a3:d3:a5:24:09:00:3f:c5:92:da:
40:67:90:13:76:5a:75:30:9a:26:fc:64:db:5b:d0:60:8f:67:
e7:46:41:dd:a9:56:36:02:d8:76:57:ac:0b:6b:b7:11:0c:80:
c9:03:03:3b:48:70:08:ff:c3:b8:bb:bd:1d:96:b6:6e:1d:00:
0e:eb:c5:03:9a:cf:09:22:7e:04:60:41:2b:30:5e:2f:76:98:
24:24:3d:5d:96:f7:d2:7b:ad:68:9b:fa:fc:72:16:0d:ab:7c:
2c:c1:50:13:5b:fd:58:89:34:9a:33:2a:7f:5b:55:6c:2f:ca:
2e:b9:03:fc:46:ab:15:70:0e:c6:24:40:e1:c4:fe:67:00:6c:
5c:e1:99:1f:d8:a6:9e:3c:eb:af:a0:ed:9a:48:d6:43:01:ad:
c1:9d:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 23:00:21 2026 by rpki-client